Cumplimiento de la normativa de seguridad de la información, para la COAC Achik Inti del cantón Cañar, segmento 4 y su progresión al segmento 3, bajo la regulación de la SEPS.

Abstract

This research analyzes compliance with information security regulations in the Achik Inti Savings and Credit Cooperative in the canton of Cañar during its transition from Segment 4 to Segment 3, in accordance with the regulations of the Superintendence of Popular and Solidarity Economy (SEPS). The study’s main objective is to identify gaps in information security and propose solutions to improve the cooperative’s processes. Three specific objectives are outlined: to conduct a theoretical review of information security in cooperatives, collect comprehensive data on the cooperative’s current state, and develop a plan that includes actions, resources and timelines to comply with Segment 3 regulations, focusing on improving policies, technological infrastructure, training and risk management. The mixed-methods approach combines qualitative and quantitative techniques, using ISO/IEC 27001:2022 as an evaluation framework, surveys and interviews with key personnel. Risk analysis centers on identifying critical assets and threats and implementing adequate security controls. Keywords: information security, ISO/IEC 27001, SEPS, risk management, regulatory compliance.